One of the most popular messaging apps in the world, WhatsApp announced a new suite of security feature enhancements designed to give users more control and protection against increasingly common online fraud and unauthorized access to accounts. The new measures, which are being introduced gradually, include a significant upgrade of two-step verification, the introduction of a system for identifying unknown calls, and expanded support for biometric login via passkeys.
Goodbye PIN, welcome password
The key change concerns two-step verification (2FA), previously based on a six-digit PIN. Although the PIN provided a basic layer of protection, it was susceptible to fraud or social engineering. WhatsApp now introduces the ability to set a full, alphanumeric password. This means that users will be able to create a complex password that contains a combination of upper and lower case letters, numbers and special characters. Such a password exponentially increases the security of the account because it is practically impossible to crack it using guessing methods. This upgrade is a key step in protecting user data and preventing account theft, which is a common problem on digital platforms.
More information about unknown calls
Another major innovation is aimed at fighting fraudsters who use phone calls to lure victims. When the user receives a call from a person whose number is not saved in contacts, WhatsApp will automatically display additional, contextual information. For example, the application will clearly indicate if the call is coming from another country, which may be the first sign of suspicious activity. Also, the system will check if the caller has common groups with the user, which can help identify legitimate contacts. The goal of this function is to provide users with enough information to make an informed decision whether to contact them, reducing the risk of fraud that often relies on creating a sense of urgency. Unfortunately, as reported by GSM Arena, this useful feature is currently only available to users of devices with the Android operating system, while there is no talk of coming to iOS yet.
Access keys are becoming standard
WhatsApp also continues to actively encourage users to switch to access keys (passkeys), a modern and secure alternative to passwords. Riverč is about a login method that enables re-access to the account using biometric data stored on the device – fingerprint or facial recognition – or a code to unlock the screen. The company describes this method as “the fastest and most secure way of confirming identity, without the need to enter codes or PINs”. Their advantage lies in the fact that the cryptographic key is It stores locally on the device and never leaves it, making it resistant to phishing attacks. That the users have recognized the advantages is evidenced by the fact that more than a billion people are older. activated this option. The latest update also brings an important novelty: the possibility of adding multiple access keys to one account. This is extremely practical for anyone who uses multiple devices, such as an Android smartphone and iPad, because now they can easily access their account from all platforms. The feature can be activated in the application settings, under the menu Settings > Account > Access keys.
Continuous efforts to protect privacy
These improvements are not an isolated case, but part of Meta’s broader strategy to strengthen security mechanisms on WhatsApp, a platform with more than two billion active users. As a reminder, support for access keys for Android users was introduced in October 2023, and for iOS in April 2024. Earlier this year, in January, WhatsApp also introduced “Strict Account Settings”, intended for users with a high risk of cyber attacks, such as journalists and public figures. The introduction of usernames was also announced, which in the future should eliminate the need to share a personal phone number and thus further protect privacy. All of these moves reflect a general trend in the industry, where user security is being prioritized in response to increasingly sophisticated online crime methods.